For reference:- If your set up is like ours, with openSuSE clients and SuSE servers and your users and autofs were created on a SuSE server using YaST then your sssd.conf needs to look like this and it will all just magically work. [sssd] config_file_version = 2 services = nss, pam, autofs domains = LDAP [nss] filter_users = root filter_groups = root [pam] [domain/LDAP] id_provider = ldap auth_provider = ldap ldap_schema = rfc2307bis ldap_uri = ldap://ldap.your.com ldap_tls_reqcert = allow ldap_autofs_search_base = ou=autofs,dc=your,dc=com ldap_autofs_map_object_class = nisMap ldap_autofs_map_name = nisMapName ldap_autofs_entry_object_class = nisObject ldap_autofs_entry_value = nisMapEntry ldap_autofs_entry_key = cn [autofs]